CVE-2023-33111

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.

CVE-2024-45559

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

CVE-2024-43051

Information disclosure while deriving keys for a session for any Widevine use case.

CVE-2025-21431

Information disclosure may be there when a guest VM is connected.

CVE-2025-27072

Information disclosure while processing a packet at EAVB BE side with invalid header length.